WAIG Foundation
WAIG Academy Learning Platform

OWASP Top 10 for AI Applications

Web and API security foundations for AI-powered products

Maps classic OWASP Top 10 risks to AI application stacks — APIs, auth, injection, and data exposure in LLM-enabled web apps.

WAIG OWASP contributor alignment.

Lessons are locked until you enroll with a verified work email and activate your WAIG Academy Learning Platform account.

Module 1: OWASP Top 10 in AI application context

  • OWASP Top 10 in AI application context12m

Module 2: API security for model and agent endpoints

  • API security for model and agent endpoints15m

Module 3: Authentication, session, and token handling

  • Authentication, session, and token handling18m

Module 4: Injection and SSRF in agent tool chains

  • Injection and SSRF in agent tool chains21m

Module 5: Logging, monitoring, and incident response

  • Logging, monitoring, and incident response12m